A Portworx administrator wants to create a storage class that can be used to create volumes with the following characteristics: • Encrypted volume •…

To create a Portworx volume that is both encrypted and has two replicas using a Kubernetes StorageClass, the correct parameters must be specified. The repl: "2" parameter correctly sets the volume's replication factor to two. The secure: "true" parameter is the specific Portworx directive used within a StorageClass to enable per-volume encryption. This combination directly fulfills the administrator's requirements for creating volumes with these characteristics.

A. The parameter encrypted: "true" is not a valid Portworx StorageClass parameter. The correct parameter to enable volume encryption is secure: "true".

B. The parameter sharedv4: "true" is used to provision a shared, multi-writer (RWX) volume and is not related to enabling volume encryption.

1. Portworx Enterprise Documentation

"Create Portworx volumes with Kubernetes": This official document provides a table of "Commonly used parameters" for StorageClasses. It explicitly lists:

secure: "Set to true to create an encrypted volume. Default is false."

repl: "Replication factor for the volume

for example

repl: "2". The default is 1."

This directly supports the use of secure: "true" and repl: "2" as seen in option C.

2. Portworx Enterprise Documentation

"Volume Encryption with Kubernetes": This section details the process of creating encrypted volumes. It provides a sample StorageClass YAML that uses secure: "true" to enable encryption

reinforcing that this is the correct parameter. The document states

"To create an encrypted volume

you must create a StorageClass with the parameter secure set to true."

3. Portworx Enterprise Documentation

"Shared Volumes": This page explains the creation of ReadWriteMany (RWX) volumes and shows that the sharedv4: "true" parameter is used for this purpose

confirming it is unrelated to encryption.